Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 194K 66M ipac~o all -- * * 0.0.0.0/0 0.0.0.0/0 2 120 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW recent: UPDATE seconds: 300 hit_count: 4 name: DEFAULT side: source 56 3312 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ctstate NEW recent: SET name: DEFAULT side: source 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 reject-with tcp-reset 14310 1836K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x01 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source 0 0 BAD_FLAGS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=64 recent: SET name: DEFAULT side: source 0 0 BAD_FLAGS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=128 recent: SET name: DEFAULT side: source 0 0 SMALL udp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:27 recent: SET name: DEFAULT side: source 0 0 SMALL tcp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:39 recent: SET name: DEFAULT side: source 0 0 SMALL icmp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:27 recent: SET name: DEFAULT side: source 0 0 SMALL 30 -- * * 0.0.0.0/0 0.0.0.0/0 length 0:31 recent: SET name: DEFAULT side: source 0 0 SMALL 47 -- * * 0.0.0.0/0 0.0.0.0/0 length 0:39 recent: SET name: DEFAULT side: source 0 0 SMALL esp -- * * 0.0.0.0/0 0.0.0.0/0 length 0:49 recent: SET name: DEFAULT side: source 0 0 SMALL ah -- * * 0.0.0.0/0 0.0.0.0/0 length 0:35 recent: SET name: DEFAULT side: source 0 0 SMALL all -- * * 0.0.0.0/0 0.0.0.0/0 length 0:19 recent: SET name: DEFAULT side: source 439 20196 BOGUS all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 0 0 NOFRAGS all -f * * 0.0.0.0/0 0.0.0.0/0 116 4640 SYN-FLOOD tcp -- eth+ * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW LOG flags 0 level 4 prefix `reset spoof TWH: ' 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW reject-with tcp-reset 1206 96390 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:137 dpt:137 947 220K SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:138 dpt:138 338 16380 SILENT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 0 0 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:389 0 0 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:2967 0 0 SYN-ONLY tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x16/0x02 ctstate NEW 0 0 ANTI-SPOOF all -- eth2 * x.x.x.49 0.0.0.0/0 0 0 ANTI-SPOOF all -- eth0 * 10.1.6.1 0.0.0.0/0 0 0 ANTI-SPOOF all -- eth1 * 10.1.2.1 0.0.0.0/0 0 0 ANTI-SPOOF all -- eth3 * 10.1.4.1 0.0.0.0/0 178K 64M blocklist all -- * * 0.0.0.0/0 0.0.0.0/0 178K 64M SPAMHAUS all -- * * 0.0.0.0/0 0.0.0.0/0 92585 58M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 56 3312 RECENT-TRIGGER all -- * * 0.0.0.0/0 0.0.0.0/0 recent: CHECK seconds: 300 name: DEFAULT side: source 0 0 LOG icmp -f * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `Fragmented incoming ICMP: ' 0 0 DROP icmp -f * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.1.6.1 icmp type 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.1.2.1 icmp type 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 10.1.4.1 icmp type 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 x.x.x.49 icmp type 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 12 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 0 0 ACCEPT tcp -- eth2 * x.x.x.70 x.x.x.49 tcp dpt:5666 ctstate NEW 0 0 ACCEPT tcp -- eth0 * 10.1.6.0/23 10.1.6.1 tcp spts:1024:65535 dpt:53 ctstate NEW 0 0 ACCEPT tcp -- eth1 * 10.1.2.0/23 10.1.2.1 tcp spts:1024:65535 dpt:53 ctstate NEW 0 0 ACCEPT tcp -- eth3 * 10.1.4.0/23 10.1.4.1 tcp spts:1024:65535 dpt:53 ctstate NEW 299 18712 ACCEPT udp -- eth0 * 10.1.6.0/23 10.1.6.1 udp spts:1024:65535 dpt:53 ctstate NEW 35 2333 ACCEPT udp -- eth1 * 10.1.2.0/23 10.1.2.1 udp spts:1024:65535 dpt:53 ctstate NEW 178 11824 ACCEPT udp -- eth3 * 10.1.4.0/23 10.1.4.1 udp spts:1024:65535 dpt:53 ctstate NEW 0 0 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.49 tcp spts:1024:65535 dpt:10000 ctstate NEW 14 672 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.71 tcp spts:1024:65535 dpt:10000 ctstate NEW 21 1236 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.49 tcp spts:1024:65535 dpt:22 ctstate NEW 124 7584 ACCEPT tcp -- eth2 * 0.0.0.0/0 x.x.x.71 tcp spts:1024:65535 dpt:25 ctstate NEW 2 96 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW 0 0 ACCEPT tcp -- eth2 * x.x.x.0/24 0.0.0.0/0 tcp spts:1024:65535 dpt:3000 ctstate NEW 9 516 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW 0 0 ACCEPT tcp -- !eth2 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:67:68 ctstate NEW 793 301K ACCEPT udp -- !eth2 * 0.0.0.0/0 0.0.0.0/0 udp dpts:67:68 ctstate NEW 0 0 ACCEPT tcp -- eth2 * x.x.x.0/24 0.0.0.0/0 tcp spts:1024:65535 dpt:21 ctstate NEW 23082 1776K ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 ctstate NEW 0 0 ACCEPT tcp -- eth2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:161 ctstate NEW 35389 2555K ACCEPT udp -- eth2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:161 ctstate NEW 0 0 ACCEPT udp -- eth2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:162 ctstate NEW 25410 1654K FINAL-DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 54405 24M ipac~fi all -- * * 0.0.0.0/0 0.0.0.0/0 54405 24M ipac~fo all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.78 reject-with icmp-port-unreachable 0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.47 reject-with icmp-port-unreachable 0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.46 reject-with icmp-port-unreachable 0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.45 reject-with icmp-port-unreachable 0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.44 reject-with icmp-port-unreachable 0 0 REJECT all -- * * 0.0.0.0/0 68.142.234.88 reject-with icmp-port-unreachable 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x01 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00 recent: SET name: DEFAULT side: source 0 0 PORTSCAN tcp -- all * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x3F recent: SET name: DEFAULT side: source 654 26432 BOGUS all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 0 0 NOFRAGS all -f * * 0.0.0.0/0 0.0.0.0/0 699 27960 SYN-FLOOD tcp -- eth+ * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04 0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW LOG flags 0 level 4 prefix `reset spoof TWH: ' 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 ctstate NEW reject-with tcp-reset 0 0 SILENT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:389 0 0 SYN-ONLY tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x16/0x02 ctstate NEW 49472 24M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 LOG icmp -f * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `Fragmented forwarded ICMP: ' 0 0 DROP icmp -f * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 12 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 0 0 ACCEPT icmp -- * eth2 0.0.0.0/0 0.0.0.0/0 icmp type 11 923 47972 ACCEPT tcp -- eth0 eth2 10.1.6.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW 736 35328 ACCEPT tcp -- eth1 eth2 10.1.2.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW 298 14304 ACCEPT tcp -- eth3 eth2 10.1.4.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW 24 1152 ACCEPT tcp -- * eth2 10.1.0.0/16 x.x.x.3 tcp spts:1024:65535 dpt:81 ctstate NEW 0 0 ACCEPT tcp -- * eth2 10.1.0.0/16 x.x.x.130 tcp spts:1024:65535 dpt:81 ctstate NEW 187 9724 ACCEPT tcp -- eth0 eth2 10.1.6.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW 73 3504 ACCEPT tcp -- eth1 eth2 10.1.2.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW 30 1440 ACCEPT tcp -- eth3 eth2 10.1.4.0/23 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW 0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpts:5190:5193 ctstate NEW 0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpts:6891:6901 ctstate NEW 21 1008 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpt:1863 ctstate NEW 0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpt:5050 ctstate NEW 0 0 ACCEPT tcp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 tcp spts:1024:65535 dpt:21 ctstate NEW 0 0 ACCEPT icmp -- !eth2 eth2 10.1.0.0/16 0.0.0.0/0 icmp type 8 ctstate NEW 2261 186K FINAL-DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 8 packets, 2768 bytes) pkts bytes target prot opt in out source destination 151K 13M ipac~i all -- * * 0.0.0.0/0 0.0.0.0/0 14310 1836K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 168 9872 BOGUS all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 0 0 NOFRAGS all -f * * 0.0.0.0/0 0.0.0.0/0 134K 11M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 LOG icmp -f * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `Fragmented outboing ICMP: ' 0 0 DROP icmp -f * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 4 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 12 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 0 0 ACCEPT icmp -- * eth2 0.0.0.0/0 0.0.0.0/0 icmp type 11 5 300 ACCEPT tcp -- * eth2 0.0.0.0/0 0.0.0.0/0 tcp spts:1024:65535 dpt:53 ctstate NEW 2402 185K ACCEPT udp -- * eth2 0.0.0.0/0 0.0.0.0/0 udp spts:1024:65535 dpt:53 ctstate NEW 150 9000 ACCEPT tcp -- * eth2 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 ctstate NEW 0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:22 ctstate NEW 30 1800 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:25 ctstate NEW 0 0 ACCEPT tcp -- * eth2 x.x.x.71 0.0.0.0/0 tcp spts:1024:65535 dpt:25 ctstate NEW 461 27660 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:80 ctstate NEW 0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:443 ctstate NEW 0 0 ACCEPT tcp -- * !eth2 0.0.0.0/0 0.0.0.0/0 tcp spt:67 189 61992 ACCEPT udp -- * !eth2 0.0.0.0/0 0.0.0.0/0 udp spt:67 0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:21 ctstate NEW 0 0 ACCEPT tcp -- * eth0 10.1.6.1 0.0.0.0/0 tcp spts:1024:65535 dpt:23 ctstate NEW 0 0 ACCEPT tcp -- * eth1 10.1.2.1 0.0.0.0/0 tcp spts:1024:65535 dpt:23 ctstate NEW 0 0 ACCEPT tcp -- * eth3 10.1.4.1 0.0.0.0/0 tcp spts:1024:65535 dpt:23 ctstate NEW 0 0 ACCEPT udp -- * eth2 x.x.x.49 0.0.0.0/0 udp spts:1024:65535 dpt:123 ctstate NEW 0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spts:1024:65535 dpt:123 ctstate NEW 0 0 ACCEPT udp -- * eth2 x.x.x.49 0.0.0.0/0 udp spt:123 dpt:123 ctstate NEW 0 0 ACCEPT tcp -- * eth2 x.x.x.49 0.0.0.0/0 tcp spt:123 dpt:123 ctstate NEW 10 552 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 ctstate NEW 0 0 ACCEPT tcp -- * eth2 0.0.0.0/0 0.0.0.0/0 tcp spt:161 ctstate NEW 0 0 ACCEPT udp -- * eth2 0.0.0.0/0 0.0.0.0/0 udp spt:161 ctstate NEW 0 0 ACCEPT udp -- * eth2 0.0.0.0/0 0.0.0.0/0 udp spt:162 ctstate NEW 0 0 FINAL-DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ANTI-SPOOF (4 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `Spoofing IN--DROP: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain BAD_FLAGS (2 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `BAD_FLAGS--SHUN: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain BOGUS (3 references) pkts bytes target prot opt in out source destination 1261 56500 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FINAL-DROP (3 references) pkts bytes target prot opt in out source destination 27671 1840K DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain LOGBLOCK (162 references) pkts bytes target prot opt in out source destination 2 372 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `filter: BLOCKLIST: ' 2 372 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain NOFRAGS (3 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `Fragment--DROP: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain PORTSCAN (14 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `PORTSCAN--SHUN: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain RECENT-TRIGGER (1 references) pkts bytes target prot opt in out source destination 56 3312 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `RECENT_TRAP: ' Chain SILENT (6 references) pkts bytes target prot opt in out source destination 2491 333K DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain SMALL (8 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `SMALL--SHUN: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain SYN-FLOOD (2 references) pkts bytes target prot opt in out source destination 815 32600 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 75/sec burst 100 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 7 level 6 prefix `SYN-FLOOD--DROP: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain SYN-ONLY (2 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/sec burst 5 LOG flags 7 level 6 prefix `New not SYN--DROP: ' 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain PREROUTING (policy ACCEPT 151M packets, 8340M bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 19M packets, 1027M bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 1885K packets, 147M bytes) pkts bytes target prot opt in out source destination